That would seem to me to indicate that the sender (exchange server) is finding something it doesn't like, and is terminating the smtp session before sending, or at least completing the message.
I'd try to determine from the exchange server side what the problem might be if that's possible. That might not be feasible, and I honestly don't know much about exchange server. The only way I can think of to diagnose this from the qmail side would be to turn on recordio during a time when you know a message is coming from that server. recordio logs the details of the entire tcp (smtp in this case) session, sort of like an strace logs each step of a program. It can create quite a lot of log content in a relatively short time on a busy server, so you probably don't want to leave it on for an extended period. It'd be best to coordinate a test with someone at the sending domain. The recordio output (in the standard smtp log) will tell you exactly what each side of the session says to each other (i.e. who initiated the termination any why). You can find examples of how to turn on recordio in the list archive. Please let us know how things progress for you. Raymond Webster wrote: > and it's only 20 seconds later. > > -----Original Message----- > From: Raymond Webster [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 3:54 PM > To: [email protected] > Subject: RE: [qmailtoaster] Delayed delivery > > I did not see anything in the queue. > > I could not find the third handshake where we log a "accepted recpt : from" > or the fourth log from simscan. > I do see the end message with a status 0 > > -----Original Message----- > From: Eric "Shubes" [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 1:35 PM > To: [email protected] > Subject: Re: [qmailtoaster] Delayed delivery > > grep won't show you everything that's in the log regarding a particular > message. You need to look at all the messages adjacent to the one grep > found. If you have qmailtoaster-plus installed (highly recommended), you can > # qmlog -lc <IP> smtp That will put you into the log(s) at the point where > it finds <IP>. You can then browse around from there and see what else is > happening. > > All of the messages for a given (successful) email receipt will look > something like this: > 01-25 11:14:38 tcpserver: status: 1/100 > 01-25 11:14:38 tcpserver: pid 8223 from sender.i.p.address > 01-25 11:14:38 tcpserver: ok 8223 qmhost:qmt.i.p.address:25 > :sender.i.p.address::34313 > 01-25 11:14:39 CHKUSER accepted sender: from > <[EMAIL PROTECTED]::> remote > <mta134.sender.domain.com:unknown:sender.i.p.address> rcpt <> : sender > accepted > 01-25 11:14:39 CHKUSER accepted rcpt: from > <[EMAIL PROTECTED]::> remote > <mta134.sender.domain.com:unknown:sender.i.p.address> rcpt > <[EMAIL PROTECTED]> : found existing recipient > 01-25 11:14:49 simscan:[8223]:CLEAN (-2.30/8.00):10.3207s:Email > Subject:sender.i.p.address:[EMAIL PROTECTED] > .com:[EMAIL PROTECTED]: > 01-25 11:14:49 tcpserver: end 8223 status 0 > 01-25 11:14:49 tcpserver: status: 0/100 > > I'm guessing that the delivery from exchange to qmail is unsuccessful. Do > you see a > tcpserver: end 16219 status 256 > ? > What are the rest of the log messages for the email in question? > > > P.S. I take it your toaster's queue is empty? > > > Raymond Webster wrote: >> This is what I found when greping for IP instead of domain name. I did >> find four other instances of these exact lines at different times. >> Should there be more communication with the outside server? If so is >> it safe to say the delay message is from their side? >> >> 2008-01-24 16:34:50.326813500 tcpserver: pid 16219 from xxx.x.xx.xxx >> 2008-01-24 16:34:50.326816500 tcpserver: ok 16219 >> qmail.ncbi.com:192.168.2.2:25 :xxx.x.xx.xxx::55690 >> 2008-01-24 16:34:50.871532500 CHKUSER accepted sender: from >> <[EMAIL PROTECTED]::> remote >> <EXHUB016-1.exch016.domain2.net:unknown:xxx.x.xx.xxx> rcpt <> : sender >> accepted >> >> -----Original Message----- >> From: Eric "Shubes" [mailto:[EMAIL PROTECTED] >> Sent: Friday, January 25, 2008 11:37 AM >> To: [email protected] >> Subject: Re: [qmailtoaster] Delayed delivery >> >> Raymond Webster wrote: >>> I have one outside client that cannot send mail to the toaster. He is >>> sending from an Exchange2007 server. He gets a delayed delivery >>> message to the email addresses he attempts so send within our domain. >>> >>> I have found this in the smtp log; >>> >>> CHKUSER accepted sender: from <[EMAIL PROTECTED] <mailto:[EMAIL >>> PROTECTED]>::> >>> remote <EXHUB016-1.exch016.domain.net:unknown:IPAddress> rcpt <> : >>> sender accepted >>> >>> Why would this make his server report a delayed delivery? >> This message is normal, and is a good thing. >> >> Can you tell if the delayed delivery message is initiated by the qmail >> or change server? >> >> Is the message stuck in qmail queue? (I doubt it, but it's worth a >> try) # qmailctl queue >> >> What are the rest of the messages in the smtp queue which correspond >> to the one you've shown us? There should be more/others. >> >> -- >> -Eric 'shubes' >> -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
